Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e709598d-6a74-3568-9da8-efe155a1ce71.roa
File: e709598d-6a74-3568-9da8-efe155a1ce71.roa (raw, json)
Hash identifier: dJ0ksyxtavsEkBZvDGJSi0oFuTYk3EpOWjNYW4AAHT0=
Subject key identifier: 99:44:4A:BA:66:38:88:C1:BA:7A:90:EE:83:39:F8:70:F6:74:F1:87
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA523E9A44DA6ED645F68C900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e709598d-6a74-3568-9da8-efe155a1ce71.roa
Signing time: Fri 21 Oct 2022 16:30:08 +0000
ROA not before: Fri 21 Oct 2022 16:30:08 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 76.211.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a5:23:e9:a4:4d:a6:ed:64:5f:68:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 21 16:30:08 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=d5ccd1a9-ea82-4096-8a0f-e2699acecb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f6:f5:25:b3:bc:48:46:d3:eb:9d:a1:dc:ce:
dd:8d:c2:af:10:9b:7d:96:9a:48:d4:f9:46:21:5a:
0d:fc:d3:25:b0:9c:57:a4:04:9e:55:f5:d8:73:a3:
5d:d4:b1:d6:7c:db:3a:40:82:d6:18:57:b2:c0:03:
40:d5:70:6d:83:1a:84:e2:07:e6:13:f5:91:bf:e2:
1d:5e:e9:bf:ab:c7:1f:2c:37:42:8f:b6:bd:22:cb:
68:ad:b0:9d:c1:1d:da:30:48:eb:92:12:ce:36:e5:
44:62:c3:36:1a:a4:a3:55:5c:98:14:17:cb:cd:24:
7e:2a:99:71:a8:bd:8b:dc:3f:f5:7a:21:08:a2:99:
7c:0d:a8:bc:19:db:5f:6a:4f:22:84:49:99:63:67:
2c:e7:7f:11:d1:3c:0c:d3:24:4d:09:6d:02:da:c3:
61:37:86:f4:ee:07:91:e3:09:d1:20:ef:0f:fa:c9:
69:6a:ae:3c:ec:ad:90:0c:5a:82:9b:db:fa:b2:25:
54:27:2c:64:19:81:11:ea:e5:2a:37:33:04:f4:fe:
a8:4d:9e:47:be:d2:94:27:b5:c8:25:14:f0:25:05:
d3:1a:58:8a:b2:f2:96:3c:20:56:bd:de:2f:1d:91:
50:52:78:6e:ab:78:b1:9c:69:2e:18:04:77:78:bf:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:4A:BA:66:38:88:C1:BA:7A:90:EE:83:39:F8:70:F6:74:F1:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e709598d-6a74-3568-9da8-efe155a1ce71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.211.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ce:65:84:f7:c1:bd:1e:57:8a:86:aa:10:80:37:d9:b5:5f:
0b:25:d7:04:09:06:38:02:dd:bd:94:b3:7f:93:03:e5:ba:39:
8a:ca:27:77:d6:e7:ff:14:83:c5:0e:ec:c6:46:89:0d:75:2c:
8e:04:79:36:83:e1:b9:6d:5a:2f:01:25:53:4a:d7:6a:d7:6b:
90:04:28:0f:d1:4d:28:86:86:cf:71:71:a8:2c:b9:06:49:03:
c3:f2:4c:fb:90:63:2e:a7:bb:f6:1c:7b:74:50:a3:f6:59:1b:
47:5c:9e:d4:52:ad:ef:65:e9:01:87:0e:35:97:58:f8:b8:18:
f1:10:5f:87:fe:8a:7c:39:2d:a4:a2:5a:25:f6:73:e6:ff:83:
63:f0:8c:df:fd:d9:97:93:bd:1e:ad:71:96:3a:12:1f:d9:05:
8b:f8:90:a3:4d:4a:33:20:d8:b9:2c:28:a0:66:ea:e2:53:df:
d3:4a:62:78:48:1e:2d:ee:75:ca:ca:a3:de:35:ec:53:24:78:
0a:c2:22:2b:6f:a8:f6:0e:94:fb:2d:7b:21:19:f1:ef:4f:61:
80:20:b4:75:19:d6:ca:19:70:9b:50:53:5a:ef:02:f5:76:58:
e0:73:02:8b:b6:33:77:07:e5:8c:d5:c5:32:3e:52:61:bc:95:
f4:f3:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:34 2025 by rpki-client